For nm.debian.org, at 2026-09-19: For the past 3 months, I have worked with Michele Cane on multiple packages in the Python team. For this past work, Michele Cane sent mails using the email address michele.cane@proton.me and he signed his work using GPG key with fingerprint 633E 7738 5959 18C4 270E 473B ECFF 3EB4 030E 6E7E. Public examples of signed mails and git commits are visible here: https://salsa.debian.org/python-team/packages/python-asyncudp/-/commits/debian/master https://salsa.debian.org/python-team/packages/python-raygeo/-/commits/debian/master https://lists.debian.org/debian-python/2026/05/msg00029.html https://lists.debian.org/debian-python/2026/07/msg00021.html https://lists.debian.org/debian-python/2026/08/msg00102.html I've made sure that he is able to decrypt encrypted messages sent to this key and that he's able to sign messages with the same key. Due to the long-term interactions we had, I'm convinced that Michele Cane as he presents himself on nm.debian.org is the rightful owner of both email address michele.cane@proton.me and GPG key 633E 7738 5959 18C4 270E 473B ECFF 3EB4 030E 6E7E.